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SUBJECT: PROTECTION AND USE OF THE NATO SECURE VOICE 
SYSTEM 

REF: AC/35-WP/80 OF 2/12/75 

1. FOLLOWING COMMENTS, DERIVED FROM JANAP 138 (A) AND 
KEYED TO AC/35-WP/80, ARE FORWARDED AS US POSITION FOR 
MAY 12 WORKING GROUP MEETING. MISSION PLEASE PASS TO 
ANDREW JOHNSON, DEPUTY DIRECTOR, NATO OFFICE OF SECURITY 
THESE US COMMENTS ON AC/35-WP/80, WITH STIPULATION THAT 
TIME CONSTRAINTS LED TO ONLY INFORMAL AND UNOFFICIAL 
POSITION BEING DEVELOPED. US WOULD APPRECIATE OPPORTUNITY 

TO FORMALLY ADDRESS ANY PROPOSED GUIDANCE OR WORKING PAPERS 
ON SUBJECT WHICH OFFICE OF SECURITY MAY DEVELOP. 

2. A. PARA 4(A)(1) PROBLEM: "TO BE ABLE TO IDENTIFY 
REMOTE SUBSCRIBERS AND VERIFY THEIR CLEARANCE AND NEED- 
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TO KNOW." 

COMMENT: PROCEDURES USED IN US AUTOSEVOCOM NET ARE: 

ACCESS TO TERMINAL EQUIPMENT IS PERMITTED ONLY THOSE 
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PERSONNEL POSSESSING CLEARANCE OF SECRET OR HIGHER, OR 

PERSONS HAVING LESSER CLEARANCE WHO ARE UNDER DIRECT 
SUPERVISION OF PROPERLY CLEARED PERSONNEL. IN LATTER 
CASE, PERSON HAVING CLEARANCE WILL ESTABLISH CALL AND 
ASSURE THAT ALL PARTIES ARE AWARE OF CLEARANCE OF INDIVI- 
DUAL CALLING. FURTHER. TERMINALS WILL BE PROVIDED THAT 
DEG RE E OF SECURITY COMMENSURATE WITH PROTECTION OF EQUIVA- 
LENT LEVELS OF CLASSIFICATION OF INFORMATION. AUTHENTICA- 
TION SYSTEMS WILL BE USED FOR LEVELS OF CLASSIFIED INFORMA- 
TION ABOVE SECRET TRANSMITTED BY AUTOSEVOCOM. UNATTENDED 
EQUIPMENT FOR WHICH SECURE STORAGE NOT POSSIBLE WILL BE 
DISENABLED. 

B. PARA 4(B)(1) PROBLEM: "PRESERVATION OF CLASSIFICA- 
TIONS OF INFORMATION WHICH WILL BE USED FURTHER BY EACH 
SUBSCRIBER (CONVERSANT)." 

COMMENT: US PROCEDURES ARE THAT CONVERSANTS MUST IDENTIFY 
LEVEL OF CLASSIFICATION OF INFORMATION BEING DISCUSSED IF 
SECRET OR ABOVE, AND MUST APPLY APPROPRIATE CLASSIFICA- 
TION PRIOR TO FURTHER DISSEMINATION. 

C. PARA 4(C)(1) PROBLEM: "TO MAINTAIN RECORDS SHOWING 
DISSEMINATION OF COSMIC TOP SECRET. ATOMAL AND SIO-ESI 
INFORMATION." 

COMMENT: ASIDE FROM AUTHENTICATION, WHICH VALIDATES 
AUTHORITY TO EXCHANGE INFORMATION, FORMAL PROCEDURES HAVE 
NOT BEEN ESTABLISHED TO FORMALLY RECORD SUBJECT OR LEVEL 
OF CLASSIFICATION OF DISCUSSIONS OVER SECURE VOICE COM- 
MUNICATIONS. IT IS SUGGESTED THAT BECAUSE INVOLVED PRO- 
CEDURES WOULD BE REQUIRED TO PERMIT DETAILED REPORTING 
OF IMPRECISE INFORMATION EXCHANGE, AND THOSE PROCEDURES 
WOULD ACCOMPLISH, AT BEST, LITTLE MORE THAN ADDITIONAL 
PAPERWORK, US HAS NOT INITIATED RECORD CONTROL. 
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D. PARA 4(1)(D) PROBLEM: "PHYSICAL PROTECTION OF SUB- 
SCRIBER INSTRUMENTS FROM UNAUTHORIZED USE." 

COMMENT: AS STATED ABOVE, US PROCEDURES CALL FOR LIMITING 
ACCESS TO PERSONNEL PROPERLY CLEARED DURING USE AND PRO- 
VIDING SECURE STORAGE OR DISABLING EQUIPMENT NOT IN USE. 

E. PARA 4(1 )(E) PROBLEM: "PROTECTION AGAINST OVER- 
HEARING AND/OR EAVESDROPPING DIRECTLY OR BY CLANDESTINE 
LISTENING DEVICES." 

COMMENT: WHILE US ESTABLISHES RIGID CONTROLS FOR SECURITY 
OF SWITCHING CENTERS, ONLY LIMITED SECURITY, COMMENSURATE 
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WITH NORMAL OPERATIONAL REQUIREMENTS, IS PROVIDED TO TER- 
MINAL LOCATIONS. IT IS SUGGESTED THAT BECAUSE AUTOSEVOCOM 
TRANSMITTED CONVERSATIONS WOULD NOT NORMALLY EXCEED LEVEL 
OF CLASSIFICATION OF INFORMATION DISCUSSED IN FACILITY 
HOUSING TERMINAL. PHYSICAL SECURITY PROTECTION AFFORDED 
TERMINAL LOCATION WOULD ADEQUATELY PROTECT CONVERSATIONS 
OVER SECURE VOICE COMMUNICATIONS. THUS IF SIOP OR COSMIC 
OR SPECIAL CATEGORY INFORMATION IS NORMALLY HANDLED/ 
DISCUSSED ON LOCATION WHERE TERMINAL IS INSTALLED, PHYSI- 
CAL PROTECTION AGAINST OVERT OR COVERT PENETRATION, I.E. 
TECHNICAL INSPECTIONS, WOULD NORMALLY PROVIDE ADEQUATE 
PROTECTION FOR INFORMATION DISCUSSED OVER AUTOSEVOCOM. 

EACH OF POSSIBLE SOLUTIONS ADDRESSED IN PARA 4(E)(2) HAVE 
APPLICATION ON CASE-BY-CASE BASIS. 

3. IT IS SUGGESTED THAT NATO REGULATIONS SHOULD: 

A. LIMIT ACCESS TO SECURE VOICE TERMINALS TO INDIVIDUALS 
WHO ARE EITHER CLEARED FOR NATO SECRET OR UNDER DIRECT 
SUPERVISION OF AN INDIVIDUAL WHO IS CLEARED FOR NATO 
SECRET. 

B. INSURE THAT SECURE VOICE EQUIPMENT MUST BE AFFORDED 
PROTECTION COMMENSURATE WITH THEIR LEVEL OF CLASSIFICATION 
OR DEACTIVATED WHEN NOT IN USE. 

C. PROVIDE FOR AUTHENTICATION BETWEEN CONVERSANTS WHEN 
COSMIC, ATOMAL, SIOP-ESI, OR OTHER SPECIAL CATEGORY IN- 
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FORMATION IS BEING DISCUSSED. 

D. ENUNCIATE POLICIES REQUIRING PERIODIC INSPECTION OF 
FACILITIES FOR PURPOSE OF ASCERTAINING ADEQUACY OF PHYSI- 
CAL PROTECTION AND IDENTIFYING VULNERABILITY TO OVERT 
OR COVERT EAVESDROPPING. 

KISSINGER 
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« END OF DOCUMENT » 
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